Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/BXw08Q3WNM6k04J2Hr2z4s1u7o8.roa
File: BXw08Q3WNM6k04J2Hr2z4s1u7o8.roa (raw, json)
Hash identifier: w7FsLrAo9ndyR3kArk1dsPj5Z4GEO8PCCfO7adiBkH4=
Subject key identifier: 05:7C:34:F1:0D:D6:34:CE:A4:D3:82:76:1E:BD:B3:E2:CD:6E:EE:8F
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 018CC64B68507A2A0476B505191719DFF989
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/BXw08Q3WNM6k04J2Hr2z4s1u7o8.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 45.9.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:68:50:7a:2a:04:76:b5:05:19:17:19:df:f9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=057c34f10dd634cea4d382761ebdb3e2cd6eee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:8f:eb:67:7d:2b:0f:17:26:1b:ec:83:9f:
c5:f1:89:62:9d:ed:95:69:0e:23:2f:19:2b:f0:26:
28:cf:7b:3b:a3:a9:5e:5a:a9:5f:ac:3e:c7:03:42:
c9:84:6c:27:6b:18:60:8f:f1:9b:61:8b:27:7e:75:
71:ce:3c:c5:64:ab:bf:3f:2f:f5:12:d8:de:a5:11:
46:b9:65:b6:bd:99:33:3f:52:60:1e:f2:0d:42:28:
a5:6d:49:3c:63:99:82:76:7b:2e:fb:fe:55:69:7e:
a6:72:82:23:66:ab:0f:dd:8d:26:d5:cd:ff:07:73:
da:26:1d:c1:1d:33:79:22:9f:5b:4c:16:dd:b1:26:
e9:95:f6:f8:97:13:9c:8b:33:99:28:8a:e6:56:64:
8a:ee:bb:5f:6c:4a:0b:82:ca:df:29:db:e9:18:d7:
37:0e:98:92:5a:e3:96:89:82:f9:fa:f4:3f:75:c5:
25:26:2d:7e:ea:e1:03:fc:84:39:17:b3:86:32:47:
4b:a6:a8:13:a9:c4:04:2b:c4:bf:c9:f2:16:1d:d7:
c8:7c:dc:03:8c:e4:67:da:1d:45:1d:6a:5c:66:f3:
e6:85:5b:a7:54:88:73:f5:55:12:b0:98:e4:55:78:
21:e2:c2:03:70:48:c1:fe:b2:e9:3f:3a:d9:e6:ad:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:34:F1:0D:D6:34:CE:A4:D3:82:76:1E:BD:B3:E2:CD:6E:EE:8F
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/BXw08Q3WNM6k04J2Hr2z4s1u7o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:81:35:fe:35:8d:e3:78:20:7d:e2:7e:b7:b7:96:d9:8b:d9:
df:90:06:02:23:53:19:fd:8b:e0:88:b8:9d:44:cb:92:21:66:
10:da:95:1e:ec:e7:83:b6:a8:f1:d9:eb:f5:c8:0d:0f:4a:e6:
97:21:e3:3f:16:79:60:b7:64:66:14:30:26:b4:d2:8b:d8:6a:
de:a0:bd:ad:20:82:ec:98:10:e8:b6:ac:35:d3:87:db:d4:ce:
67:4a:fe:97:0c:36:60:a2:8c:62:5e:ea:d4:92:d6:19:56:62:
6b:45:1a:f7:61:27:25:2a:34:fe:1f:e9:64:52:ce:c3:52:1f:
c0:67:a8:ee:6e:5d:bb:1c:72:5a:39:7c:67:25:03:5e:28:59:
6b:de:6e:33:af:81:31:90:4f:48:a7:2e:08:f7:f8:b7:f9:dc:
db:30:bf:6d:18:a3:ee:39:d1:b7:05:a3:d2:a1:45:11:e2:79:
0a:a1:dc:32:c6:b0:4a:71:10:36:f7:f0:84:19:e3:c4:1c:e5:
b3:ee:3b:b5:f7:3d:e4:2d:d2:69:99:9d:22:5c:c6:0b:f3:a5:
32:9b:37:d0:7d:55:87:dc:38:11:9d:5a:c2:47:40:d4:e6:08:
7b:85:8c:f4:74:0a:32:03:e8:60:51:f9:72:e0:73:6e:51:0b:
3e:c9:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:57:37 2024 by rpki-client on console-fra.rpki-client.org